diff --git a/org.eclipse.mylyn.commons-target/mylyn-commons-e4.5.target b/org.eclipse.mylyn.commons-target/mylyn-commons-e4.5.target
index 86db188..f248b03 100644
--- a/org.eclipse.mylyn.commons-target/mylyn-commons-e4.5.target
+++ b/org.eclipse.mylyn.commons-target/mylyn-commons-e4.5.target
@@ -8,7 +8,7 @@
 <unit id="com.google.guava" version="21.0.0.v20170206-1425"/>
 <unit id="com.thoughtworks.qdox" version="1.6.3.v20081201-1400"/>
 <unit id="javax.xml" version="1.3.4.v201005080400"/>
-<unit id="org.apache.commons.codec" version="1.6.0.v201305230611"/>
+<unit id="org.apache.commons.codec" version="1.9.0.v20170208-1614"/>
 <unit id="org.apache.commons.httpclient" version="3.1.0.v201012070820"/>
 <unit id="org.apache.commons.io" version="2.0.1.v201105210651"/>
 <unit id="org.apache.commons.lang" version="2.6.0.v201404270220"/>
diff --git a/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.4.target b/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.4.target
index 10ce217..17b13c1 100644
--- a/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.4.target
+++ b/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.4.target
@@ -36,7 +36,7 @@
 <unit id="org.apache.ant" version="1.8.4.v201404171501"/>
 <unit id="org.apache.ant.source" version="1.8.4.v201404171501"/>
 <unit id="org.apache.axis" version="1.4.0.v201005080400"/>
-<unit id="org.apache.commons.codec" version="1.6.0.v201305230611"/>
+<unit id="org.apache.commons.codec" version="1.9.0.v20170208-1614"/>
 <unit id="org.apache.commons.discovery" version="0.2.0.v201004190315"/>
 <unit id="org.apache.commons.httpclient" version="3.1.0.v201012070820"/>
 <unit id="org.apache.commons.io" version="2.0.1.v201105210651"/>
diff --git a/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.5.target b/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.5.target
index c0cd02c..bac980b 100644
--- a/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.5.target
+++ b/org.eclipse.mylyn.development/Bootstrap/mylyn-bootstrap-e4.5.target
@@ -34,7 +34,7 @@
 <unit id="org.antlr.runtime" version="3.0.0.v200803061811"/>
 <unit id="org.apache.ant" version="1.8.4.v201404171501"/>
 <unit id="org.apache.ant.source" version="1.8.4.v201404171501"/>
-<unit id="org.apache.commons.codec" version="1.6.0.v201305230611"/>
+<unit id="org.apache.commons.codec" version="1.9.0.v20170208-1614"/>
 <unit id="org.apache.commons.discovery" version="0.2.0.v201004190315"/>
 <unit id="org.apache.commons.httpclient" version="3.1.0.v201012070820"/>
 <unit id="org.apache.commons.io" version="2.0.1.v201105210651"/>
diff --git a/org.eclipse.mylyn.development/Work/mylyn-work-e4.4.target b/org.eclipse.mylyn.development/Work/mylyn-work-e4.4.target
index 83538f7..e2b33e6 100644
--- a/org.eclipse.mylyn.development/Work/mylyn-work-e4.4.target
+++ b/org.eclipse.mylyn.development/Work/mylyn-work-e4.4.target
@@ -28,7 +28,7 @@
 <unit id="org.apache.ant" version="1.8.4.v201303080030"/>
 <unit id="org.apache.ant.source" version="1.8.4.v201303080030"/>
 <unit id="org.apache.axis" version="1.4.0.v201005080400"/>
-<unit id="org.apache.commons.codec" version="1.6.0.v201305230611"/>
+<unit id="org.apache.commons.codec" version="1.9.0.v20170208-1614"/>
 <unit id="org.apache.commons.discovery" version="0.2.0.v201004190315"/>
 <unit id="org.apache.commons.httpclient" version="3.1.0.v201012070820"/>
 <unit id="org.apache.commons.io" version="2.0.1.v201105210651"/>